Cookbook Configuration
45
When a user accesses www.taobao.com, a message is displayed, indicating that the user is prohibited from
accessing this website and needs to contact the website administrator.
If a policy does not take effect, click ? to view the cause.
2. HTTPS Domain Name Filtering and Audit
Application Scenario
1. The router serves as an egress and can access the Internet by using a static IP address. The LAN user router
is configured on the LAN port of the NBR router to provide basic Internet access.
2. LAN users’ access to HTTPS websites can be audited and blocked.
Figure 3-1 Network Topology
Prerequisites
1. On Basic Settings, use the default audit policy to audit domain names of HTTPS websites.
2. On Basic Settings, select the blacklist mode to block specified websites.
3. On Basic Settings, select the whitelist mode to restrict accessible websites.
4. On Advanced Settings, configure the website blocking/allowing and audit/audit exemption functions.
Procedure
Method 1: Enable the HTTPS domain name audit on Basic Settings.
Choose Behavior > Behavior Policy > Basic Settings and select Website and HTTPS Audit in Enable Audit
to enable HTTPS domain name audit.
NBR device
Gi0/0
PC
Common network cable